Yubikey not being seen by Vmware VM over RDP connection

Question

Salutations

I have a specific issue that I cannot find much help on so hoping this great community can help me.

I have a physical Windows 10 client that I stick my yubikey into. The workstation can detect the key (verified through device manager) and I then RDP on to a

windows 2019 server that has the Yubikey manager software. That vmware VM (ESXs - vsphere) cannot detect the key.

Just to be clear, I do not want to use the yubikey for authentication, I just want it to appear on the remote windows VM so I can run the yubikey manager software

to start enrollment.

I have found 1 useful guide = https://queensidecastle.com/guides/use-a-yubikey-remotely-over-rdp

but it still did not work for me. For those who do not want to read the link I did the following

Workstation

Enabled - Allow RDP redirection of other supported RemoteFX USB devices from this computer

Updated the Registry with the Class GUID of the Yubikey (Series 5 NFC) - [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services\Client\UsbSelectDeviceByInterfaces]

Remote Windows Server

Disabled - Do not allow supported Plug and Play device redirection

On the workstation I can see the Yubikey but not on the VM.

Any suggestions? I may have gone off tangent and started looking at ESXi USB pass through but that is if I want to stick the yubikey in the ESXi host I believe?

Thanks

Trilby

Answer 1

Might need to request vendor support here.
https://support.yubico.com/hc/en-us/requests/new

--please don't forget to Accept as answer if the reply is helpful--

Answer 2

Hello Patrick

Thank you for your suggestion but I do not believe it is Yubikey issue because I have proven I can get yubikey to work on a Windows server 2019.

I think the issue is one which the Workstation has taken "control" of the yubikey and will not let go so the VM does not see it, however my google fu is not finding the correct answer for me.

Answer 3

The vendor will be your best resource for debugging problems with their product.

--please don't forget to Accept as answer if the reply is helpful--

Answer 4

I will ask, however as the link I have now corrected in my original post shows it did work.

Question posted - they work Mon - Fri so will update here one way or another.

Answer 5

Sounds good.

--please don't forget to Accept as answer if the reply is helpful--